Doh. Thanks. Like I always say: I should not be trusted to implement crypto.

cperciva · on Oct 29, 2009

This is a harmless mistake, for two reasons:

1. It doesn't actually weaken the MAC.

2. You'd never manage to ship that bug anyway, since all of your test cases would fail.

I'm not saying that you should be trusted to implement crypto, but I don't think this particular error is a good reason for such a lack of trust. :-)